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LISTING OF THE CLAIMS 

This listing of claims will replace all prior versions, and listings, of claims in the present 
application. Additions are identified by underlining. Deletions are indicated by otrikothrough or 
[brackets]. 

Claim 1 (currently amended) A communication network, comprising: 

(A) local communication links, 

(B) a plurality of separately located central office switching systems interconnected via 
trunk circuits for selectively providing switched call connections between at least two of the 
local communication links, 

(C) a signaling communication system including at least one signaling network element, 
said signaling communication system configured to provide two-way communications of control 
data messages between and among said cental central office switching systems and said 
signaling network element, said signaling communication system interconnecting the central 
office switching systems and said signaling network element; 

(D) a signaling gateway, separate from the central office switching systems and 
connected to said signaling communications system, said signaling gateway including an 
interface connected to a remote communications network and configured to exchange said 
control data messages between said remote communication network and said signaling 
communication system, and 

(E) a signaling system security monitor, separate from the central office switching 
systems, said signaling system security monitor configured to determine if said control data 
messages are contextually proper. 

Claim 2 (original) The communications network according to claim 1 wherein said 
signaling system security monitor is configured to evaluate said control data messages to 
determine an effect of said control messages if acted upon by one of (i) said central office 
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switching systems and (ii) said network element and, in response, determine if said control data 
messages are proper. 

Claim 3 (original) The communications network according to claim 1 wherein said 
signaling system security monitor is further configured to correlate messages associated with a 
call or transaction to ensure that a proper relationship exists between parameter values in the 
correlated messages. 

Claim 4 (original) The communications network according to claim 1 wherein said 
control data messages comprise ISUP messages. 

Claim 5 (original) The communications network according to claim 1 wherein said 
signaling system security monitor is configured to selectively communicate said ISUP messages 
between said signaling gateway and one of said central office switching systems in response to a 
determination that said ISUP messages are proper. 

Claim 6 (original) The communications network according to claim 1 wherein said 
signaling network element comprises a service control point (SCP) wherein said signaling 
system security monitor is configured to evaluate said control data messages sent to and received 
from said SCP, and correlate said messages to determine that said messages are proper and to 
ensure that a proper relationship exists between said messages and between parameter values of 
said messages. 

Claim 7 (original) The communications network according to claim 1 wherein said 
control data messages comprise TCAP messages. 

Claim 8 (original) The communications network according to claim 1 wherein said 
signaling system security monitor is configured to maintain records of the contexts of existing 
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calls and transactions, and evaluate whether monitored messages are appropriate to those 
contexts. 

Claim 9 (currently amended) A communication network, comprising: 

(A) local communication links, 

(B) a plurality of separately located central office switching systems interconnected via 
trunk circuits for selectively providing switched call connections between at least two of the 
local communication links in response to predetermined control data messages, 

(C) a signaling communication system for two-way communications of said control data 
messages between said central c e nta l office switching systems, said signaling communication 
system interconnecting the central office switching systems; 

(D) a signaling gateway, separate from the central office switching systems and 
connected to said signaling communications system, said signaling gateway including an 
interface connected to a remote communications network and configured to exchange said 
control data messages between said remote communication network and said signaling 
communication system, and 

(E) a signaling system security monitor, separate from the central office switching 
systems, said signaling system security monitor configured to determine if said control data 
messages are contextually proper. 

Claim 10 (original) The communications network according to claim 9 wherein said 
signaling system security monitor is configured to evaluate said control data messages and 
correlate said messages to determine that said messages are proper and to ensure that a proper 
relationship exists between said messages and between parameter values of said messages. 

Claim 1 1 (original) The communications network according to claim 9 wherein said 
signaling system security monitor is further configured to correlate messages associated with a 
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call or transaction to ensure that a proper relationship exists between parameter values in the 
correlated messages. 

Claim 12 (original) The communications network according to claim 10 wherein said 
control data messages comprise ISUP messages. 

Claim 13 (original) The communications network according to claim 12 wherein said 
signaling system security monitor is configured to selectively communicate said ISUP messages 
between said signaling gateway and one of said central office switching systems in response to a 
determination that said ISUP messages are proper. 

Claim 14 (original) The communications network according to claim 10 further 
comprising a service control point (SCP) wherein said signaling system security monitor is 
configured to evaluate said control data messages sent to and received from said SCP, and 
correlate said messages to determine that said messages are proper and to ensure that a proper 
relationship exists between said messages and between parameter values of said messages. 

Claim 15 (original) The communications network according to claim 10 wherein said 
control data messages comprise TCAP messages. 

Claim 16 (original) The communications network according to claim 15 further 
comprising a service control point (SCP) wherein said signaling system security monitor is 
configured to selectively communicate said TCAP messages between said signaling gateway and 
SCP in response to a determination that said TCAP messages are proper. 

Claim 17 (original) The communications network according to claim 9 wherein said 
signaling system security monitor is configured to maintain records of the contexts of existing 
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calls and transactions, and evaluate whether monitored messages are appropriate to those 
contexts. 

Claim 18 (original) The communications network according to claim 9 wherein said 
signaling system security monitor is configured to selectively enable and inhibit said signaling 
gateway from exchanging said control data messages between said remote communication 
network and said signaling communication system. 

Claim 19 (original) The communications network according to claim 9 wherein said 
signaling communication system includes a service control point (SCP) and said signaling 
system security monitor includes a memory storing states of said central office switching 
systems and said SCP, said processor additionally responsive to said states for determining if 
said control messages are proper. 

Claim 20 (original) The communications network according to claim 9 wherein said 
signaling system security monitor is configured to selectively modify said control messages in 
response to a determination of the propriety of said control messages. 

Claim 21 (original) The communications network according to claim 9 wherein said 
signaling gateway includes a signaling protocol converter. 

Claim 22 (original) The communications network according to claim 21 wherein said 
signaling protocol converter is configured to convert SS7 type messages to another packet data 
format 

Claim 23 (currently amended) The communications network according to claim 22 
wherein the ether another packet data format is an Internet Protocol (IP) fonnat. 
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Claim 24 (original) The communications network according to claim 21 wherein said 
signaling system security monitor is configured to monitor information contained in an MTP 
Layer 3 portion of said control data messages. 

Claim 25 (original) The communications network according to claim 24 wherein said 
information contained in said MTP Layer 3 portion of said control data messages includes (i) a 
destination point code, (ii) an originating point code, and (iii) a service indicator. 

Claim 26 (original) The communications network according to claim 9 wherein said 
signaling system security monitor is configured to monitor at least one of SCCP, ISUP, TCAP, 
and AIN messages. 

Claim 27 (original) The communications network according to claim 9 wherein said 
signaling system security monitor is configured to monitor a plurality of message types selected 
from SCCP, ISUP, TCAP, and AIN type messages. 

Claim 28 (original) The communications network according to claim 9 wherein said 
signaling system security monitor is configured to monitor calling and called party address 
parameters contained in SCCP message portions of said control data messages. 

Claim 29 (original) The communications network according to claim 28 wherein said 
signaling system security monitor is configured to determine if said monitored calling and called 
party address parameters are consistent with an authorized signaling relationship. 
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Claim 30 (original) The communications network according to claim 9 wherein said 
signaling system security monitor is configured to monitor calling and called party address 
parameters contained in an SCCP message portion of said control data messages. 

Claim 31 (currently amended) The communications network according to claim 9 
wherein said signaling system security monitor is configured to monitor origination and 
destination point codes contained in the an MTP header of the control data messages and calling 
and called party address parameters contained in the SCCP message portion of said control data 
messages. 

Claim 32 (currently amended) The communications network according to claim 9 
wherein said signaling system security monitor is configured to monitor origination and 
destination point code parameters contained in the an MTP header of said control data messages 
and determine if a particular destination point code is authorized to send a particular message to 
a particular destination point code. 

Claim 33 (original) The communications network according to claim 9 wherein said 
signaling system security monitor includes a memory storing a state of said communications 
network. 

Claim 34 (original) The communication network according to claim 9 wherein said 
signaling system security monitor includes a memory storing permissible states of said 
communications network and rules for transitioning from each of said permissible states to 
others of said permissible states. 

Claim 35 (original) The communications network according to claim 9 wherein said 
signaling system security monitor includes a memory storing data relating call progress status 
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with respective sets of control messages appropriate to initiate a next action consistent with a 
particular service. 

Claim 36 (original) The communications network according to claim 9 wherein said 
signaling system security monitor includes a memory storing data relating transaction status with 
respective sets of control messages appropriate to initiate a next action consistent with a 
particular service. 

Claim 37 (original) The communications network according to claim 9 wherein said 
signaling system security monitor includes a memory storing a plurality of message templates. 

Claim 38 (currently amended) The communications network according to claim 23 
37 wherein said plurality of message templates are associated with a plurality of service 
providers. 

Claim 39 (original) The communications netwoik according to claim 38 wherein said 
signaling system security monitor associates each of said control data messages with a 
corresponding one of said service providers and selects one of said message templates in 
response to the corresponding one of said service providers. 

Claim 40 (currently amended) The communications network according to claim 9 
wherein said signaling system security monitor includes a memory storing sets of templates, each 
of said sets corresponding to a set of control messages appropriate to a particular call progress 
flow or transaction. 

Claim 41 (currently amended) The communications network according to claim 40 
wherein said sets of templates define message formats, parameters and values associated with 
control message types selected from SCCP, ISUP, TCAP and AIN type messages. 
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Claim 42 (original) The communications network according to claim 40 wherein said 
signaling system security monitor is configured to select said sets of templates in response to 
service provider authorization data associated with respective ones of said control data messages. 

Claim 43 (original) The communications network according to claim 9 wherein said 
signaling system security monitor comprises a certification agent configured to exchange and 
maintain encryption key certificates. 

Claim 44 (original) The communications network according to claim 9 wherein said 
signaling system security monitor is configured to issue and decrypt digital time stamps. 

Claim 45 (original) The communications network according to claim 9 wherein said 
signaling system security monitor comprises a digital certificate issuing authority. 

Claim 46 (original) The communications network according to claim 9 wherein said 
signaling system security monitor includes data encryption and decryption facilities. 

Claim 47 (currently amended) A method of securely interfacing control links of 
respective communication networks, comprisin g tho otepo of : 

exchanging control data messages between a remote communication network and a local 
signaling communication system; 

interpreting said control data messages to determine whether it is appropriate with respect 
to a destination point code of said control data messag e messages and, in response, detennining 
if said control data messages are contextuallv proper; 

selectively communicating said control data messages between c e ntal central office 
switching systems; and 
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selectively providing switched call connections between at least two of the local 
communication links in response to predetermined control data messages. 

Claim 48 (original) The method according to claim 47 wherein said step of interpreting 
include steps of maintaining records of the contexts of existing calls and transactions, and 
evaluating whether monitored messages are appropriate to those contexts. 

Claim 49 (original) The method according to claim 47 wherein said signaling system 
wherein said step of selectively communicating control data messages includes selectively 
enabling and inhibiting said signaling gateway from exchanging said control data messages 
between said remote communication network and said signaling communication system. 

Claim 50 (currently amended) The method according to claim 47 further including 
a step of storing states of respective ones of said central office switching systems, wherein said 
interpreting step is additionally responsive to said states for determining if said control messages 
are contextuallv proper. 

Claim 51 (original) The method according to claim 47 further comprising a step of 
selectively modifying said control messages in response to a determination of an impropriety of 
said control messages. 

Claim 52 (original) The method according to claim 47 further comprising a step of 
converting a protocol of said control data messages between a protocol of said remote 
communication network and a protocol of said local signaling communication system. 

Claim 53 (original) The method according to claim 52 wherein one of said protocols is 
an SS7 compliant message protocol. 
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Claim 54 (original) The method according to claim 52 wherein one of said protocols is 
an Internet Protocol (IP) format. 

Claim 55 (original) The method according to claim 52 wherein said signaling system 
security monitor is configured to monitor information contained in an MTP Layer 3 portion of 
said control data messages. 

Claim 56 (original) The method according to claim 55 wherein said information 
contained in said MTP Layer 3 portion of said control data messages includes (i) a destination 
point code, (ii) an originating point code, and (iii) a service indicator. 

Claim 57 (original) The method according to claim 47 wherein said interpreting step 
includes monitoring of at least one of SCCP, ISUP, TCAP, and AIN messages. 

Claim 58 (original) The method accoixiing to claim 47 wherein said interpreting step 
includes monitoring of a plurality of message types selected from SCCP, ISUP, TCAP, and AIN 
type messages. 

Claim 59 (original) The method according to claim 47 wherein said interpreting step 
includes monitoring of calling and called party address parameters contained in SCCP message 
portions of said control data messages. 

Claim 60 (original) The method according to claim 47 wherein said interpreting step 
includes determining if said monitor calling and called party address parameters are consistent 
with an authorized signaling relationship. 
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Claim 61 (original) The method according to claim 47 wherein said interpreting step 
includes monitoring calling and called party address parameters contained in an SCCP message 
portion of said control data messages. 

Claim 62 (currently amended) The method according to claim 47 wherein said 
interpreting step includes monitoring origination and destination point codes contained in the an 
MTP header of the control data m e ssag e messages and calling and called party address 
parameters contained in an the SCCP message portion of said control data messages. 

Claim 63 (currently amended) The method according to claim 47 wherein said 
interpreting step includes monitoring origination and destination point codes parameters 
contained in the an MTP header of said control data messages and determining if a particular 
destination point code is authorized to send a particular message to a particular destination point 
code. 

Claim 64 (original) The method according to claim 47 further comprising a step of 
storing a state of said communications network. 

Claim 65 (original) The method according to claim 47 further comprising a step of 
storing (i) permissible states of said communications network and (ii) rules for transitioning from 
each of said permissible states to others of said permissible states. 

Claim 66 (original) The method according to claim 47 further comprising a step of 
storing data relating call progress status with respective sets of control messages appropriate to 
initiate a next action consistent with a particular service. 
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Claim 67 (original) The method according to claim 47 further comprising a step of 
storing data relating transaction status with respective sets of control messages appropriate to 
initiate a next action consistent with a particular service. 

Claim 68 (original) The method according to claim 47 further comprising a step of 
storing a plurality of message templates. 

Claim 69 (original) The method according to claim 68 wherein said plurality of 
message templates are associated with a plurality of service providers. 

Claim 70 (original) The method according to claim 69 further comprising steps of: 

associating each of said control data messages with a corresponding one of said service 
providers; and 

selecting one of said message templates in response to the corresponding one of said 
service providers. 

Claim 71 (original) The method according to claim 47 further comprising a step of 
storing sets of templates, each of said sets corresponding to control messages appropriate to 
particular call progress flow. 

Claim 72 (original) The method according to claim 71 wherein said templates define 
message formats, parameters and values associated with control message types selected from 
SCCP, ISUP, TCAP and AIN type messages. 

Claim 73 (original) The method according to claim 71 further comprising a step of 
selecting said sets of templates in response to service provider authorization data associated with 
respective ones of said control data messages. 
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Claim 74 (original) The method according to claim 47 further comprising steps of 
exchanging and maintaining encryption key certificates. 

Claim 75 (original) The method according to claim 47 further comprising steps of 
issuing and decrypting digital time stamps. 

Claim 76 (original) The method according to claim 47 further comprising a step of 
issuing a digital certificate. 



15 



PACE 16/19 ■ RCVD AT 4/7/2005 1 2:22:30 PM [Eastern Daylight Tine] * SVR:USPTO-EFXRF-1/1 • DNIS: 8729306 * CSID: 9727 18394 6 * DURATION (mnvss):07-26 



